CVE-2023-33984 Cross-Site Scripting (XSS) vulnerability in NetWeaver (Design Time Repository)

SAP NetWeaver Design Time Repository - version 7.50, returns an unfavorable content type for some versioned files, which could allow an authorized attacker to create a file with a malicious content and send a link to a victim in an email or instant message. Under certain circumstances, this could...

CVE-2023-26459 Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker authenticated as a non-administrative user can craft a request which will trigger the application server to send a request to ...

CVE-2023-23859

SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information...

SAP Netweaver 缓冲区错误漏洞

SAP Netweaver is a service oriented, integrated application platform from SAP Germany that provides a development and runtime environment for SAP applications. SAP Netweaver is vulnerable to an input validation error that results from a network system or product that does not properly validate da...

SAP Netweaver 信息泄露漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. There is a security vulnerability in SAP, and no details of the vulnerability are provided at this time...

The vulnerability of the SAP NetWeaver software integration platform lies in the lack of protection for operational data, which allows attackers to disclose confidential information.

The vulnerability of the SAP NetWeaver software integration platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the SAP NetWeaver software integration platform, related to the lack of protection for operational data, allows a perpetrator to gain access to the list of users in this system.

The vulnerability of the SAP NetWeaver software integration platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the list of users in this system by querying the values...

PT-2020-5170 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 740, 750, 751, 752, 753, 754, 755 Description: The issue allows a business user to access the list of users in the given system using value help, leading to Information Disclosure. It is...

PT-2020-5977 · Sap · Sap Netweaver +2

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 753, 755 Description: The issue allows an attacker to inject code that can be executed by the application, leading to code injection. This...

SAP NetWeaver UUID Generation Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security vulnerability exists in SAP NetWeaver. An attacker could exploit the vulnerability to obtain sensitiv...

CVE-2016-10311

Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service by sending a crafted packet to the SAPSTARTSRV port, aka SAP Security Note 2295238...

SAP NetWeaver ABAP Remote Authorization Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A remote authorization bypass vulnerability exists in SAP NetWeaver, which can be exploited by attackers to gain...

PT-2016-20: XML External Entity Injection in SAP NetWeaver

The specialists of the Positive Research center have detected an XML External Entity Injection vulnerability in SAP NetWeaver. Vulnerability in the "FloorPlanApp" component allows attackers to obtain sensitive information or cause a denial of service using a specially crafted XML request. How to...

PT-2016-26: XML External Entity Injection in SAP NetWeaver

The specialists of the Positive Research center have detected an XML External Entity Injection vulnerability in SAP NetWeaver. Vulnerability in the "YWorksLayouter" component allows attackers to obtain sensitive information or cause a denial of service using a specially crafted XML request. How t...

The vulnerability of the SAP NetWeaver software integration platform allows a perpetrator to trigger a service failure.

The vulnerability of the UDDI component in the SAP NetWeaver software integration platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created XML request...

CVE-2016-3976

Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the fileName parameter to CrashFileDownloadServlet, aka SAP Security Note 2234971...

The vulnerability of the SAP NetWeaver software integration platform allows a hacker to inject any Web or HTML code.

The vulnerability of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

SAP NetWeaver Gain Privilege Vulnerability

SAP NetWeaver is Germany SAP SAP company's set of service-oriented integrated application platform, the platform can provide development and operation environment for SAP applications. A privilege acquisition vulnerability exists in SAP NetWeaver that allows remote attackers to gain access via...

PT-2013-24: Concealing User Authority in SAP NetWeaver

The specialists of the Positive Research center have detected "Concealing User Authority" vulnerability in SAP NetWeaver. No matter how much authority the user '............' has, it is not reflected in report RSUSR002. How to fix Update your software up to the latest version Advisory status...